Bob Stevenson wrote:
> a) The machine that is running squid is a Sun Ultra Enterprise 2
> with 256MB of memory but it seems inadequate to serve the web requests
This machine should be more than enought to handle only 200 users.
Squid version?
Solaris version/patchlevel?
Requests/second? (before it slows down)
Any Solaris TCP/IP tuning set?
What is the process size of Squid?
> b) squid.conf says that enabling httpd_accel_uses_host_header,
> "opens a big security hole". What are these security implications
> and how can they be avoided?
This comment is only relevant when running as a pure accelerator, not
proxy/combined mode. What the comment says is that Squid can be told to
go to any server when _uses_host_header is enabled (as if it was a
proxy). Protection is done with ACL rules if needed.
--- Henrik NordströmReceived on Fri May 08 1998 - 12:13:43 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:40:07 MST